---
title: "Logout"
method: POST
path: "/auth/logout"
tags: ["auth"]
---

# Logout

`POST /auth/logout`

## Request

- Base URL: `https://api.instruxi.dev/api/v1/enforcer`
- URL: `https://api.instruxi.dev/api/v1/enforcer/auth/logout`
- Auth: one of:
  - API key in header `Authorization`
  - API key in header `X-API-Key`

Revokes the caller's entire refresh-token family (all devices/sessions sharing that `refresh_token`'s lineage), given `refresh_token` in the body. 401 if the token doesn't resolve to the caller.

## Request body

- InternalDeliveryHttpHandlerLogoutRequest
  - `refresh_token` string

## Response `200`

OK

- InternalDeliveryHttpHandlerOKResponse
  - `success` boolean

## Other responses

- `400`: Bad Request
- `401`: Unauthorized

---

[API](https://skmtc.dev/instruxi/apis/enforcer-api.md) · [All operations](https://skmtc.dev/instruxi/apis/enforcer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/instruxi/apis/enforcer-api/revisions/fa82bc1becc0?raw)